Back to Home
williamayal icon

wetrack-mcp-server

by williamayal

Overview

Provides an MCP (Model Context Protocol) server for AI models to generate and execute MongoDB aggregation pipelines on financial event data.

Installation

Run Command
python -m src.server_http

Environment Variables

  • MONGODB_URI
  • MONGODB_DATABASE
  • MONGODB_VIEW
  • OPENAI_API_KEY

Security Notes

Critical vulnerability: The main '/mcp' endpoint, which handles AI tool calls, has its authentication mechanism explicitly commented out (disabled) in `src/server_http.py`, making it publicly accessible regardless of `.env` settings. OAuth2 and Bearer tokens are stored in a local JSON file (`oauth_tokens.json`) for persistence, which is insecure for production. CORS is set to allow all origins ('*'). The server executes LLM-generated MongoDB pipelines directly, posing a risk if the LLM is compromised or misaligned, as it could generate destructive operations (though aggregation views typically mitigate some direct write risks).

Similar Servers

Stats

Interest Score0
Security Score2
Cost ClassHigh
Avg Tokens1500
Stars0
Forks1
Last Update2025-12-01

Tags

MongoDBLLMAIAPIAuthenticationFinancial Data